Known vulnerabilities in SUSE OpenStack Cloud Crowbar 8 - page 25

Vendor: SUSE
Software: SUSE OpenStack Cloud Crowbar
Version: 8
Software CPE: cpe:2.3:o:suse:suse_openstack_cloud_crowbar:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 799
Public exploits: 40
Known exploited (KEV): 18

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE OpenStack Cloud Crowbar version 8 SUSE OpenStack Cloud Crowbar 8 is affected by 799 vulnerabilities: 10 critical, 218 high, 288 medium, 283 low Critical High Medium Low

Vulnerabilities (799)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71379 - Incorrect Regular Expression
CVE-2022-40897		 CWE-185 Medium
No
No
 - 20.01.2023 SB2023012008
SB2023012015
SB2023012016
and 99 more
#VU71308 - Improper input validation
CVE-2023-22792		 CWE-20 Medium
No
No
 - 18.01.2023 SB2023011833
SB2023021735
SB2023021739
and 4 more
#VU71307 - Improper input validation
CVE-2023-22795		 CWE-20 Medium
No
No
 - 18.01.2023 SB2023011833
SB2023021735
SB2023021739
and 5 more
#VU71237 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-47950		 CWE-611 Medium
No
No
 - 17.01.2023 SB2023011738
SB2023012566
SB2023020941
and 5 more
#VU69583 - Improper input validation
CVE-2022-29181		 CWE-20 Medium
No
No
 - 24.11.2022 SB2022112433
SB2022112434
SB2022112435
and 12 more
#VU68961 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-27777		 CWE-79 Low
No
No
 - 03.11.2022 SB2022110317
SB2022110319
SB2022110320
and 2 more
#VU68855 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-39348		 CWE-79 Low
No
No
 - 31.10.2022 SB2022103137
SB20221115106
SB2022111743
and 12 more
#VU67757 - Improper Access Control
CVE-2022-3100		 CWE-284 Medium
No
No
 - 29.09.2022 SB2022092961
SB2022092965
SB2022100505
and 3 more
#VU67588 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-1734		 CWE-78 High
No
No
 - 22.09.2022 SB2022092241
SB2022092242
SB2020041808
and 1 more
#VU67555 - Incorrect Regular Expression
CVE-2022-40023		 CWE-185 Medium
No
No
 - 21.09.2022 SB2022092139
SB2022092141
SB2022102426
and 20 more
#VU66201 - Security Features
CVE-2022-2255		 CWE-254 Medium
No
No
 - 09.08.2022 SB2022080904
SB2022080914
SB2022111643
and 6 more
#VU64190 - Incorrect Regular Expression
CVE-2022-24836		 CWE-185 Low
No
No
 - 12.06.2022 SB2022061205
SB2022061209
SB2022111849
and 11 more
#VU61488 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-24761		 CWE-444 Medium
No
No
 - 21.03.2022 SB2022032107
SB2022040525
SB2022040622
and 12 more
#VU58824 - Improper input validation
CVE-2021-44716		 CWE-20 Medium
No
No
 - 10.12.2021 SB2021121010
SB2021121011
SB2021121605
and 67 more
#VU57320 - Improper Access Control
CVE-2021-39226		 CWE-284 Medium
Public exploit available
Exploited
 - 12.10.2021 SB2021101262
SB2021101320
SB2021101321
and 22 more
#VU26355 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-10108		 CWE-444 Medium
No
No
 - 24.03.2020 SB2020031234
SB2020032419
SB2020043012
and 12 more
#VU24218 - Improper input validation
CVE-2019-11287		 CWE-20 Medium
No
No
 - 13.01.2020 SB2019112307
SB2020011311
SB2021062428
and 5 more
#VU22927 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-15587		 CWE-79 Low
No
No
 - 22.11.2019 SB2019102229
SB2022110425
SB2022111834
and 3 more
#VU31043 - Improper input validation
CVE-2019-12387		 CWE-20 Medium
No
No
 - 10.06.2019 SB2019061006
SB2019072125
SB2019072129
and 5 more
#VU11251 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8048		 CWE-79 Low
No
No
 - 22.03.2018 SB2018032305
SB2018041401
SB2022111834


Showing elements 481 - 500 out of 799